updated strong parameters for user controller